This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: QmQYqIqWZvubSZUN548bXx/BMQKvOATrmle/M+bIJO4=
Subject key identifier: 2D:B5:A9:4B:41:89:D3:60:DD:00:78:36:1C:1F:8A:F7:9C:5A:03:00
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 019C41A1E3E27896E4A1834619CFE63535EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 1389
Signing time: Mon 09 Feb 2026 09:00:54 +0000
Manifest this update: Mon 09 Feb 2026 09:00:54 +0000
Manifest next update: Tue 10 Feb 2026 09:00:54 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: mXtG1ZKJZENzaVMzA7IzNHzFw0Omtr0e5Up1pjgfwt8=)
2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:e3:e2:78:96:e4:a1:83:46:19:cf:e6:35:35:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Feb 9 09:00:54 2026 GMT
Not After : Feb 10 09:00:54 2026 GMT
Subject: CN=2db5a94b4189d360dd0078361c1f8af79c5a0300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:25:cd:15:34:ca:0c:94:fe:fe:4a:1c:d6:2f:
c3:a5:00:7f:aa:82:fa:3f:39:fd:74:f8:49:94:ed:
b5:1f:89:d0:9f:00:40:96:fe:3a:33:bd:28:c2:a3:
42:e1:c8:38:41:66:c4:a4:ab:d0:a2:e6:cc:e5:45:
06:57:fb:ba:b7:f4:47:c1:86:2b:4b:7a:5d:7f:7a:
cb:55:56:86:1d:fa:84:69:d4:01:2d:f2:48:3c:61:
fb:13:69:46:2e:50:04:c9:fc:98:99:d4:55:ab:05:
e8:6c:aa:20:14:1b:2c:25:a0:e2:da:0f:d0:08:ff:
fd:43:2f:cb:0d:12:30:7e:b7:1e:56:be:53:b3:65:
7e:80:ce:87:b6:69:5e:b1:08:26:e7:87:2e:ca:0f:
94:bf:48:07:00:fc:df:3a:82:a5:37:6d:3d:71:ef:
d8:78:0d:25:2b:1a:2a:c2:08:0f:fb:78:4c:c8:e5:
9a:0d:a6:2c:3d:59:18:da:13:49:d9:52:66:37:4f:
c7:c1:9c:aa:93:1c:6a:14:38:00:13:30:ae:b4:bc:
9f:4e:86:22:60:46:ab:d7:7e:d9:eb:60:ee:47:e9:
e6:19:74:c5:4d:a0:02:5e:ba:73:bb:e8:a6:38:20:
9e:b9:30:4d:a2:f9:5f:58:d8:67:83:84:6b:bc:96:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:A9:4B:41:89:D3:60:DD:00:78:36:1C:1F:8A:F7:9C:5A:03:00
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7e:e0:25:3b:f5:7b:aa:05:57:31:71:d2:9e:a0:fd:cd:b8:
7a:3b:ef:87:47:48:e2:88:86:ba:88:ea:34:13:e0:6c:1a:0c:
fa:26:0c:61:f4:9d:dc:26:4e:4b:2b:67:61:d1:ee:cf:5c:b5:
1d:9c:63:a4:e0:91:f2:2c:53:1a:85:55:47:25:69:a9:af:96:
2f:fa:f4:7b:08:4c:29:c9:e6:b7:3d:38:02:a9:cb:ff:c2:80:
bf:f2:e3:70:29:9b:06:09:69:16:a7:50:7a:2a:08:b6:a4:53:
33:9e:30:08:3a:58:88:0c:6b:9d:10:9a:cb:b1:e4:21:3c:3b:
01:fa:84:d1:46:ae:e8:20:b2:09:bd:0d:94:73:dc:d1:f0:52:
97:cb:5e:b8:7e:4e:98:23:d0:06:59:0a:7c:0a:5f:be:5e:85:
cf:e5:22:8f:c7:35:14:04:43:75:50:f5:39:69:64:dc:eb:31:
32:38:7b:c2:f4:19:30:3a:68:9c:bc:3a:50:5f:6e:16:d7:bb:
96:be:0a:2a:d8:21:01:04:66:83:61:4e:ad:b0:35:e3:2c:f2:
1e:a8:d2:e6:ab:fe:4e:df:23:15:cd:d6:4e:4a:ec:0c:00:fa:
c0:61:84:1d:64:15:53:6b:43:1d:e3:07:15:44:fa:b7:9a:f2:
c8:63:c0:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoePieJbkoYNGGc/mNTXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MTA3NGUzMjgyMmM4YmVmM2E3ZGNiMzEyODA4MjViZDI3
NTQ1YzkwHhcNMjYwMjA5MDkwMDU0WhcNMjYwMjEwMDkwMDU0WjAzMTEwLwYDVQQD
EygyZGI1YTk0YjQxODlkMzYwZGQwMDc4MzYxYzFmOGFmNzljNWEwMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iXNFTTKDJT+/koc1i/DpQB/qoL6
Pzn9dPhJlO21H4nQnwBAlv46M70owqNC4cg4QWbEpKvQoubM5UUGV/u6t/RHwYYr
S3pdf3rLVVaGHfqEadQBLfJIPGH7E2lGLlAEyfyYmdRVqwXobKogFBssJaDi2g/Q
CP/9Qy/LDRIwfrceVr5Ts2V+gM6HtmlesQgm54cuyg+Uv0gHAPzfOoKlN209ce/Y
eA0lKxoqwggP+3hMyOWaDaYsPVkY2hNJ2VJmN0/HwZyqkxxqFDgAEzCutLyfToYi
YEar137Z62DuR+nmGXTFTaACXrpzu+imOCCeuTBNovlfWNhng4RrvJYiVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC21qUtBidNg3QB4NhwfivecWgMAMB8GA1UdIwQY
MBaAFOgQdOMoIsi+86fcsxKAglvSdUXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQt
M2U0ZTg0ZjM1Y2QwLzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQtM2U0ZTg0ZjM1Y2Qw
LzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX7gJTv1
e6oFVzFx0p6g/c24ejvvh0dI4oiGuojqNBPgbBoM+iYMYfSd3CZOSytnYdHuz1y1
HZxjpOCR8ixTGoVVRyVpqa+WL/r0ewhMKcnmtz04AqnL/8KAv/LjcCmbBglpFqdQ
eioItqRTM54wCDpYiAxrnRCay7HkITw7AfqE0Uau6CCyCb0NlHPc0fBSl8teuH5O
mCPQBlkKfApfvl6Fz+Uij8c1FARDdVD1OWlk3OsxMjh7wvQZMDponLw6UF9uFte7
lr4KKtghAQRmg2FOrbA14yzyHqjS5qv+Tt8jFc3WTkrsDAD6wGGEHWQVU2tDHeMH
FUT6t5ryyGPA+w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:05 2026 by rpki-client